Transparency

This page is a plain-language account of who runs CarrotVPN, how it's funded, and what happens if we're ever asked for user data. It's meant to be read alongside our No-Logs Policy and Privacy Policy, not instead of them.

Government & Law Enforcement Requests

We have not received a government or law enforcement request for user VPN activity data. If we ever do, our answer is determined by what we actually have — and since we don't collect browsing history, DNS queries, IP address logs, or connection timestamps, there is nothing to hand over regardless of who's asking. This page will be updated if that ever changes.

Who Runs CarrotVPN

CarrotVPN is developed and operated by Vinnorokom IT, a software company based in Bangladesh. It is not a shell brand for a larger, undisclosed VPN conglomerate — Vinnorokom IT is the entity you're dealing with, listed as the developer on the Google Play listing and as publisher across this site's structured data.

How CarrotVPN Is Funded

CarrotVPN's free tier is funded by in-app advertising, not by selling user data — which isn't possible in the first place, since VPN activity data is never collected. An optional in-app upgrade is also available through Google Play Billing for users who want an ad-free experience; using it is entirely optional and doesn't change what data is or isn't collected about your VPN activity.

Open-Source Components

CarrotVPN is built on WireGuard®, an open-source VPN protocol whose cryptographic design is publicly documented and has been the subject of independent academic review. Building on an open protocol, rather than a proprietary one, means the core encryption CarrotVPN relies on can be independently scrutinized rather than taken on faith.

Jurisdiction

Vinnorokom IT is based in Bangladesh. We cover what this means for legal requests and data retention obligations in more detail in our no-logs policy explainer and in the Terms of Service.

Questions

If anything on this page, our No-Logs Policy, or our Privacy Policy seems inconsistent with how the app actually behaves, or with what's declared in CarrotVPN's Google Play Data Safety section, please tell us — that's a mismatch we want to know about and fix.